HIPAA establishes protections for personal health information. It covers health care providers, health plans, and health care clearinghouses. Protected health information includes a patient's medical files, conversations between patients and doctors, and billing information. HIPAA requires administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of electronic protected health information. Violations of HIPAA can result in fines ranging from $100 to $50,000 depending on the nature of the violation and whether it was corrected.